Wireshark Network Protocol Analyzer

Wireshark is the world's leading network protocol analyzer, a free and open-source tool that lets users dive deep into network traffic for analysis, debugging, and security investigation. Distributed under the GNU General Public License and supported by the Wireshark Foundation, the software achieves over 20 million annual downloads with an active community of more than 100,000 contributors and translations into over 20 languages. The latest stable release version 4.6.6 provides deep inspection of hundreds of network protocols including TCP, UDP, HTTP, HTTPS, TLS, DNS, DHCP, SMB, NFS, FTP, SSH, Telnet, SNMP, BGP, OSPF, and many proprietary protocols used by enterprise applications. Core capabilities include live capture from any network interface, offline analysis of previously captured packet data using PCAP and PCAPng file formats, rich display filtering with over 1,000 protocol-specific fields and comparison operators, three-pane packet browser showing protocol tree, hex dump, and packet list with colorized protocols, VoIP call analysis with playback of decoded audio streams, decryption support for TLS, SSL, WPA, and WEP with key provisioning, and statistical analysis tools including IO graphs, flow graphs, conversations, and endpoints with bandwidth calculations. The tool supports capture from Ethernet, Wi-Fi, Bluetooth, USB, Loopback, and virtual interfaces, with remote capture via rpcapd. The Wireshark Certified Analyst certification program provides professional credentials for network analysts, complemented by SharkFest conferences held annually in the United States and Europe. The ecosystem includes Stratoshark for system call analysis, Npcap for packet capture on Windows, and over 2,500 protocol dissectors contributed by the community.